Hi tateu, I have an old External Backup HDD which I've encrypted with TC few years ago, and it's a hidden partition...I haven't accessed the drive for more than a year, and I'm sure that I know the password (or at least the most of it),but I can't access it, I suspect that there is something wrong with that HDD, but I want to make sure before I trash it.

So I have tried with TrueCrypt on Windows8.1 and I have also tried with VeraCrypt on Linux (on TC mode) but no luck!Both Windows and Linux see the hidden drive when I click on "Select device" and it's on: \Device\Hardisk3\Partition1

Password - I remember it clearly was: "WindowTrueCrypt007" or Maybe "WindowTrueCryptSSD007" - I know for sure that the 1st word is "Window"!

But now I have some doubts about 2nd (if Capitalized or not) and 3rd word (With/out SSD) and about the numbers (007/700/077) so I want to try with:

WindowTrueCrypt007WindowTryecrypt007Windowtruecrypt007

Each Word was used Once, so the combination has to be something like this: |Window| + |TrueCrypt| + (Don't know if there's + |SSD| before the Numbers) + |007|... How do I do that?

1) The boot loader token is only there if you encrypted your operating system drive/partition. I'm not sure what you mean by "the HDD is hidden." Do you mean a TrueCrypt hidden "volume?" Regular TrueCrypt volumes and hidden volumes do not have a boot loader token because they are not bootable.

2) Yes. {4} will try all variations that are 4 characters long. {3-4} will try all variations that are 3 characters and 4 characters long.

Thu, 2018/01/25 1:07 am

Crypto

Joined: Sun, 2018/01/21 11:12 pmPosts: 3

Re: So glad I found OTFBrutusGUI, a little help please

1) Yes - It's a TrueCrypt hidden "volume"! Good to know, I guess that even without the token, it's a good sign that I don't see zeros in Hex Editors, but random characters everywhere. but I can't still explain why I can't mount the drive or bruteforce it, I think it has some header issue.After all, I know the password for sure, and even the "Auto-mount Device" is not working like it used to, so I wonder what else can I do in order to access it.

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot post attachments in this forum